Honor task boundaries without category-based reconfirmation

Plugin-Submission: 376a2e62cb9798570173a95497ab405cf980872a40c3c42f358d083c5af2d63c

docs/behavior-scenarios.md

@@ -41,6 +41,9 @@ These are static review cases, not a record that a model executed them. Use them
 | API supports configuration_update, Desktop tool lacks it | No claimed runtime effort switch or invented tool parameter |
 | API request uses automatic compaction and requests dynamic effort | Resolve documented incompatibility before enabling configuration updates |
 | Stronger instruction following encounters a vague skill suggestion | Identify the actual rule; do not invent an approval gate |
+| User requests a change through merge and release, with stated task boundaries | Parent completes task-required external steps within those boundaries; no separate category-based approval or reconfirmation |
+| User requests a local fix and explicitly forbids push or deployment | Honor the stated boundary; complete local work only |
+| Task-required production write has a materially ambiguous target | Clarify the target while continuing independent work; honor higher-priority host restrictions |
 | Small change passes relevant required checks | Stop validation unless new changes/failures/uncertainty justify more |
 | Active prompt grants standing parallel authorization; ordinary task has independent useful slices | Dispatch promptly without asking again; parent advances critical path |
 | Template merely exists on disk, no active delegation authorization | No spawn based solely on the template's existence |

docs/releases/2.3.1.md

@@ -0,0 +1,13 @@
+# 2.3.1 — 以任务边界执行，取消类别二次确认
+
+## 变化
+
+- 可选全局 `prompts/AGENTS.md` 以用户任务请求及其中声明的边界确定执行范围。完成任务所必需的外部写入、发布、合并、部署和生产写入随任务执行，不再因操作类别另设授权或二次确认。
+- 仓库开发约定与技能入口同步说明这一规则；只有目标或边界存在实质歧义时才澄清，更高优先级宿主限制继续生效。
+- 新增静态行为场景，覆盖任务包含合并发布、用户明确禁止外部步骤，以及生产目标存在实质歧义。
+
+## 兼容与验证边界
+
+子智能体触发授权、主线程串行处理外部步骤、所选模型、证据 schema、安装备份及破坏性操作边界保持原样。这是任务范围的解释调整，不授予超出用户任务的操作权限，也不覆盖宿主限制。
+
+本地更新时先预览技能差异。已有个人全局规则应只修改对应条款并备份；`--include-prompt --apply` 仍会整体替换全局提示词，不用于合并个人规则。